GIAC Certified Incident Handler (GCIH) — Question 160

Which of the following is the difference between SSL and S-HTTP?

Answer options

• A. SSL operates at the application layer and S-HTTP operates at the network layer.
• B. SSL operates at the application layer and S-HTTP operates at the transport layer.
• C. SSL operates at the network layer and S-HTTP operates at the application layer.
• D. SSL operates at the transport layer and S-HTTP operates at the application layer.

Correct answer: D

Explanation

The correct answer is D because SSL operates at the transport layer, providing security for protocols like HTTP, while S-HTTP is designed to secure HTTP messages at the application layer. Options A, B, and C incorrectly assign the operational layers of these protocols.